luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity
open-vault/changelog/15494.txt

4 lines
142 B
Plaintext
Raw Normal View History

Warn on empty Subject field for issuers (#15494) * Warn on empty Subject field for issuers When generating a root or signing an intermediate certificate, it is possible to have Vault generate a certificate with an empty Subject. These don't validate in most TLS implementations well, so add a warning. Note that non-Common Name fields could be present to make a non-empty subject, so simply requiring a CommonName isn't strictly the best. For example: $ vault write pki/root/generate/exported common_name="" WARNING! The following warnings were returned from Vault: * This issuer certificate was generated without a Subject; this makes it likely that issuing leaf certs with this certificate will cause TLS validation libraries to reject this certificate. .... Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com> * Add changelog Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2022-05-18 14:15:37 +00:00
```release-note:improvement
secrets/pki: Warn on empty Subject field during issuer generation (root/generate and root/sign-intermediate).
```